CVE-2025-31959

creationtimestamp| type| source ---|---|--- 2026-05-06 17:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7aelzoe42h...

CVE-2026-43278

creationtimestamp| type| source ---|---|--- 2026-05-06 17:25:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116528795236956577 2026-05-07 11:52:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116533148086350826 2026-07-02 06:18:13+00:00| seen|...

GHSA-Q4W7-56HR-83RM

creationtimestamp| type| source ---|---|--- 2026-05-06 17:10:29+00:00| seen| https://gist.github.com/alon710/8f2a8c09229ab2a61f27e4872d065fac...

CVE-2026-43273

creationtimestamp| type| source ---|---|--- 2026-05-06 14:25:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6vr2jybz2e 2026-07-02 06:18:07+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:53:57+00:00| seen...

CVE-2026-43275

creationtimestamp| type| source ---|---|--- 2026-05-06 14:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6uqtt57u2p 2026-07-02 06:18:09+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:53:59+00:00| seen...

CVE-2026-43266

creationtimestamp| type| source ---|---|--- 2026-05-06 14:00:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6ufxscao2t 2026-07-02 06:17:56+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:52:36+00:00| seen...

CVE-2026-44985

creationtimestamp| type| source ---|---|--- 2026-05-06 12:29:00+00:00| published-proof-of-concept| https://github.com/amir20/dozzle/security/advisories/GHSA-j643-x8pv-8m67 2026-05-27 01:09:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsd3b27g32n 2026-06-22 00:32:33+00:00| see...

PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation

A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...

CVE-2026-23928

creationtimestamp| type| source ---|---|--- 2026-05-06 10:31:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6iq6wlim2r 2026-05-06 14:30:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2c6y7n2q...

CVE-2026-35254

creationtimestamp| type| source ---|---|--- 2026-05-06 10:11:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6hmax7f32r...

CVE-2026-43077

creationtimestamp| type| source ---|---|--- 2026-05-06 09:59:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527041500918607 2026-05-07 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260508 2026-06-01 18:00:00+00:00|...

CVE-2026-7332

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookingformpageurl' parameter in all versions up to, and including, 5.5.0 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2026-6344

The Fluent Forms plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 6.2.1. This is due to insufficient path validation in the getAttachments method of EmailNotificationActions, which resolves attacker-supplied file-upload URLs into filesystem paths without...

CVE-2026-7332

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookingformpageurl' parameter in all versions up to, and including, 5.5.0 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2026-7332 LatePoint <= 5.5.0 - Unauthenticated Stored Cross-Site Scripting via 'booking_form_page_url' Parameter

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookingformpageurl' parameter in all versions up to, and including, 5.5.0 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2026-7332 LatePoint <= 5.5.0 - Unauthenticated Stored Cross-Site Scripting via 'booking_form_page_url' Parameter

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookingformpageurl' parameter in all versions up to, and including, 5.5.0 due to insufficient input sanitization and output escaping. This makes it possib...

EUVD-2026-27540

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookingformpageurl' parameter in all versions up to, and including, 5.5.0 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2026-7332

The CVE affects the LatePoint WordPress plugin (Calendar Booking Plugin for Appointments and Events), up to version 5.5.0. The root cause is insufficient input sanitization and output escaping for the booking_form_page_url parameter, enabling unauthenticated stored XSS. Impact stated: arbitrary s...

EUVD-2026-27536

The Fluent Forms plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 6.2.1. This is due to insufficient path validation in the getAttachments method of EmailNotificationActions, which resolves attacker-supplied file-upload URLs into filesystem paths without...

CVE-2026-6672 Affiliate Program Suite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode

The Affiliate Program Suite — SliceWP Affiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in all versions up to, and including, 1.2.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes in the...